Firewall-Documentation for Audi

The primary task of a firewall is to ensure that only desired connections are used via permitted channels (e.g. proxy).
This task must be guaranteed regardless of the respective location (physical/network).
Firewall rules should generally follow the whitelist approach and be structured according to the KISS (Keep it small/simple) in order to ensure the lowest possible complexity despite extensive protection.
A set of rules should be identical across the board/across locations. This must be taken into account when building a set of rules

    Basic Settings

  • Trellix Core Networking
    Allow outbound system application
    Action: Allow
    Direction: Out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wirelles,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    SYSTEM [System]
    Allow ARP Traffic
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wirelles,Virtual)
    Protocol: Non_IP = (806) Address Resolution Protocol (ARP)
    Local: Local Network Name: Local Network Range:
    Remote: Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:

    Allow EAPOL traffic
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wirelles,Virtual)
    Protocol: Non_IP = (888e) EAPOL
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow outbound stock applications
    Action: Allow
    Direction: Out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired, Wireless, Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Stock Apps alg.exe *\Windows\system32\alg.exe
    Stock Apps dns.exe *\Windows\system32\dns.exe
    Stock Apps lsass.exe *\Windows\system32\lsass.exe
    Stock Apps services.exe *\Windows\system32\services.exe
    Stock Apps spoolsv.exe *\Windows\system32\spoolsv.exe
    Stock Apps svchost.exe *\Windows\system32\svchost.exe
    Stock Apps userinit.exe *\Windows\system32\userinit.exe
    Stock Apps winlogon.exe *\Windows\system32\winlogon.exe
    Allow McAfee applications
    Action: Alllow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    McAfee signed executables CN=MCAFEE INTERNATIONAL LTD., OU=R&D, OU=DIGITAL ID CLASS 3 - MICROSOFT SOFTWARE VALIDATION V2, O=MCAFEE INTERNATIONAL LTD., L=HOVE, ST=EAST SUSSEX, C=GB
    McAfee signed executables CN="mcafee, inc.", OU=iis, OU=digital id class 3 - microsoft software validation v2, O="mcafee, inc.", L=santa clara, ST=california, C=us
    McAfee signed executables CN="mcafee, inc.", OU=engineering, O="mcafee, inc.", L=santa clara, ST=california, C=us
    McAfee signed executables CN=Intel Corporation, OU=ISecG Enterprise, O=Intel Corporation, STREET=2200 Mission College Blvd, STREET=FM1-110, L=Santa Clara, ST=CA, POSTALCODE=95054, C=US
    McAfee signed executables CN="mcafee, inc.", OU=engineering, OU=digital id class 3 - microsoft software validation v2, O="mcafee, inc.", L=santa clara, ST=oregon, C=us
    McAfee signed executables CN=McAfee VTP signed
    Allow outbound ICMPv4 traffic
    Action: Allow
    Direction: Out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol: ICMP
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow outbound ICMPv6 traffic
    Action: Allow
    Direction: Out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMPv6/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol: ICMPv6
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow DNS traffic
    Action: Allow
    Direction: Out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: UDP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol: UDP
    Local Port:
    Remote Port: 53
    Application: Application Name: Filename: Signer:
    Allow outbound loopback and broadcast traffic
    Action: Allow
    Direction: Out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Allow general traffic2 IP ::1
    Allow general traffic2 IP 127.0.0.1
    Allow general traffic2 IP 255.255.255.255
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound traffic from special IP addresses
    Action: Allow
    Direction: In
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All Protocols/Any
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Allow special traffic1 IP 0000:0000:0000:0000:0000:0000:0000:0000
    Allow special traffic1 IP 0000:0000:0000:0000:0000:ffff:0000:0000
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow BOOTP traffic
    Action: Allow
    Direction: Out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: UDP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol: UDP
    Local Port: 68
    Remote Port: 67
    Application: Application Name: Filename: Signer:
  • Allow_Trellix_signed_Products
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    FireEye xagt.exe xagt.exe C=us, ST=california, L=milpitas, OID.1.3.6.1.4.1.311.60.2.1.3=us, OID.1.3.6.1.4.1.311.60.2.1.2=delaware, O=
    McAfee signed executables CN=MCAFEE INTERNATIONAL LTD., OU=R&D, OU=DIGITAL ID CLASS 3 - MICROSOFT SOFTWARE VALIDATION V2, O=MCAFEE INTERNATIONAL LTD., L=HOVE, ST=EAST SUSSEX, C=GB
    McAfee signed executables CN="mcafee, inc.", OU=iis, OU=digital id class 3 - microsoft software validation v2, O="mcafee, inc.", L=santa clara, ST=california, C=us
    McAfee signed executables CN="mcafee, inc.", OU=engineering, O="mcafee, inc.", L=santa clara, ST=california, C=us
    McAfee signed executables CN=Intel Corporation, OU=ISecG Enterprise, O=Intel Corporation, STREET=2200 Mission College Blvd, STREET=FM1-110, L=Santa Clara, ST=CA, POSTALCODE=95054, C=US
    McAfee signed executables CN="mcafee, inc.", OU=engineering, OU=digital id class 3 - microsoft software validation v2, O="mcafee, inc.", L=santa clara, ST=oregon, C=us
    McAfee signed executables CN=McAfee VTP signed
    Trellix signed executables CN=musarubra us llc, O=musarubra us llc, ST=texas, C=us
    • Block Rules

  • AUDI_Blocked_APPs_Windows
    AUDI_Block_wrong_Skype_Servers
    Action: Block
    Direction: Out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    10.0.0.0/8 10.0.0.0/8
    Network (Remote): Remote Network Name: Remote Network Range:
    Skype Server Subnets 58.185.67.0/24
    Skype Server Subnets 84.21.34.0/24
    Skype Server Subnets 91.198.139.0/24
    Skype Server Subnets 139.122.207.0/24
    Skype Server Subnets 149.247.178.0/24
    Skype Server Subnets 187.8.218.0/24
    Skype Server Subnets 187.8.233.0/24
    Skype Server Subnets 193.108.108.0/24
    Skype Server Subnets 193.110.194.0/24
    Skype Server Subnets 193.182.2.0/24
    Skype Server Subnets 194.114.82.0/24
    Skype Server Subnets 194.114.126.0/24
    Skype Server Subnets 195.226.111.0/24
    Skype Server Subnets 199.5.50.0/24
    Skype Server Subnets 199.5.59.0/24
    Skype Server Subnets 202.38.134.0/24
    Skype Server Subnets 202.106.175.0/24
    Skype Server Subnets 213.255.45.0/24
    Skype Server Subnets 217.10.82.0/24
    Skype Server Subnets 217.57.29.0/24
    Skype Server Subnets 219.149.223.0/24
    Transport Protocol: TCP
    Local Port:
    Remote Port: 443
    Application: Application Name: Filename: Signer:
    Skype/Lync *\Office16\lync.exe *\Office16\lync.exe
    Block_Teamcenter_VISview
    Block_Teamcenter_VISview
    Action: Block
    Direction: Out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: UDP/IPv4, UDP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol: UDP
    Local Port: 8888
    Remote Port: 8888
    Application: Application Name: Filename: Signer:
    Block_Teamcenter_VISview
    Action: block
    Direction: out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol: TCP
    Local Port: 8888
    Remote Port: 8888
    Application: Application Name: Filename: Signer:
    Block_Camtasia
    Action: block
    Direction: out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Camtasia Apps CamMenuMaker.exe CamMenuMaker.exe
    Camtasia Apps CamMenuPlayer.exe CamMenuPlayer.exe
    Camtasia Apps CamPlay.exe CamPlay.exe
    Camtasia Apps CamRecorder.exe CamRecorder.exe
    Camtasia Apps CamtasiaStudio.exe CamtasiaStudio.exe
    Camtasia Apps CamtasiaUtl.exe CamtasiaUtl.exe
    Block_GoogleSketchUp
    Action: block
    Direction: out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Sketchup Apps SketchUp.exe
    • Company Specific BasicRules

  • AUDI_Basic_Rules
    Allow inbound ICMPv4 Destination unreachable
    Action: Alllow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMP/IPv4
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 3
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound ICMPv6 Destination unreachable
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol: ICMP/IPv6
    Local Port: 1
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound ICMPv4 Time exceeded
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMP/IPv4
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 11
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound ICMPv6 Time exceeded
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type:
    Protocol: ICMP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 3
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound ICMPv4 Echo Reply
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMP/IPv4
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 0
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound ICMPv6 Echo Reply
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 129
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound ICMPv6 Packet too big
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 2
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound ICMPv6 Parameter Problem
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 4
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound ICMPv6 Router Advertisement
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 134
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound ICMPv6 Neighbor Solicitation
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMPv6/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 135
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow inbound ICMPv6 Neighbor Advertisement
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol: ICMPv6/IPv6
    Local Port: 136
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow outbound Multicast
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: UDP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Standard_Multicast 224.0.0.0/4
    Standard_Multicast ff02::1
    Transport Protocol: UDP
    Local Port:
    Remote Port: 5355
    Application: Application Name: Filename: Signer:
    Allow outbound Link Local
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4 IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Standard_Link_Local 169.254.0.0/16
    Standard_Link_Local fe80::0/10
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow IGMP
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: IGMP/IPv4 IGMP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Corporate_Network 10.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2401:4dc0:0/29
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow Loopback
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Local Networks ::1
    Local Networks 127.0.0.0/8
    Local Networks Any local IP Adress
    Network (Remote): Remote Network Name: Remote Network Range:
    Remote Network ::1
    Remote Network 127.0.0.0/8
    Remote Network Any local IP Adress
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    • nonTunnel Rules

  • non_Tunnel
    AUDI_Teams_direct_outgoing
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: UDP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Microsoft_Teams_Voice_CIDRs 13.107.64.0/18
    Microsoft_Teams_Voice_CIDRs 52.112.0.0/14
    Microsoft_Teams_Voice_CIDRs 52.120.0.0/14
    Microsoft_Teams_Voice_CIDRs 2603:1063::0/39
    Teams_21Vianet_CIDR 42.159.34.32/27
    Teams_21Vianet_CIDR 42.159.34.64/27
    Teams_21Vianet_CIDR 42.159.34.96/28
    Teams_21Vianet_CIDR 42.159.162.32/27
    Teams_21Vianet_CIDR 42.159.162.64/27
    Teams_21Vianet_CIDR 42.159.162.96/28
    Teams_21Vianet_CIDR 159.27.160.0/21
    Teams_21Vianet_CIDR 2406:e500:4a00::0/39
    Transport Protocol: UDP
    Local Port:
    Remote Port: 3478-3481
    Application: Application Name: Filename: Signer:
    Citrix_TeamsApps_WIN_SIGN HdxRtcEngine.exe HdxRtcEngine.exe CN="citrix systems, inc.", OU=xenapp(server sha256) 2021, O="citrix systems, inc.", L=fort lauderdale, ST=florida, C=us
    Citrix_TeamsApps_WIN_SIGN HdxTeams.exe HdxTeams.exe CN="citrix systems, inc.", OU=xenapp(server sha256) 2021, O="citrix systems, inc.", L=fort lauderdale, ST=florida, C=us
    Enterprise_APPs_Teams_WIN_SIGN MsTeams ms-teams.exe CN=microsoft corporation, O=microsoft corporation, L=redmond, ST=washington, C=us
    Enterprise_APPs_Teams_WIN_SIGN Teams teams.exe CN=microsoft corporation, O=microsoft corporation, L=redmond, ST=washington, C=us
    AUDI_Zscaler_CIDRs_direct_outgoing
    Action: Allow
    Direction: Outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: TCP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Audi_Zscaler_CIDRs 104.129.192.0/20
    Audi_Zscaler_CIDRs 136.226.0.0/16
    Audi_Zscaler_CIDRs 137.83.128.0/18
    Audi_Zscaler_CIDRs 147.161.128.0/17
    Audi_Zscaler_CIDRs 165.225.0.0/17
    Audi_Zscaler_CIDRs 165.225.192.0/18
    Audi_Zscaler_CIDRs 170.85.0.0/16
    Audi_Zscaler_CIDRs 185.46.212.0/22
    Audi_Zscaler_CIDRs 199.168.148.0/22
    Transport Protocol: TCP
    Local Port:
    Remote Port: 80, 443, 8080
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSAService.exe ZSAService.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATray.exe ZSATray.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATrayManager.exe ZSATrayManager.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATunnel.exe ZSATunnel.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSAUpdater.exe ZSAUpdater.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    Allow_outbound_Remotecontrol
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: TCP/IPv4 TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Corporate_Network 10.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2401:4dc0:0/29
    Transport Protocol: TCP
    Local Port:
    Remote Port: 2701-2702
    Application: Application Name: Filename: Signer:
    SCCM Remote Control rc_sscm.exe rc_sscm.exe
    Allow_outbound_ENX_WABCO
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    170.205.219.9 170.205.219.9
    Transport Protocol: TCP
    Local Port:
    Remote Port: 7001,7003
    Application: Application Name: Filename: Signer:
    Allow_inbound_mmDNS
    Action: Allow
    Direction: inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: Wireless
    Protocol: UDP/IPv4, UDP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Multicast DNS 224.0.0.251
    Network (Remote): Remote Network Name: Remote Network Range:
    10.0.0.0/8 10.0.0.0/8
    Transport Protocol: UDP
    Local Port: 5353
    Remote Port: 5353
    Application: Application Name: Filename: Signer:
    java.exe java.exe java.exe
    Allow_outbound_Appgate
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    143.164.6.149 143.164.6.149
    Transport Protocol: TCP
    Local Port:
    Remote Port: 22, 80, 443
    Application: Application Name: Filename: Signer:
  • non_Tunnel (newAD Migration)
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria: newADRegKey HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\QsRUMAgent\Config\ControllerCheckInterval=600
    Connection Type:
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Allow Winlogoin via Zscaler
    Action: Allow
    Direction: outbound
    LocalAwareness: ENABLED
    Conncection Isolation:
    require ePO reachable:
    Location Criteria: REGKEY=HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\QsRUMAgent\Config\ControllerCheckInterval=600
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Winlogon_FQDNs login.microsoftonlin.com
    Winlogon_FQDNs login.windows.net
    Winlogon_FQDNs windowsazure.com
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSAService.exe ZSAService.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATray.exe ZSATray.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATrayManager.exe ZSATrayManager.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATunnel.exe ZSATunnel.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSAUpdater.exe ZSAUpdater.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    • Tunnel Settings

  • VPN Connection
    AUDI_VPN_Connection_TCP
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: TCP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_VPN_Gateways 143.164.6.70
    AUDI_VPN_Gateways 143.164.6.75
    AUDI_VPN_Gateways 143.164.36.4
    AUDI_VPN_Gateways 143.164.36.9
    AUDI_VPN_Gateways 143.164.99.0/24
    AUDI_VPN_Gateways 2001:678:35c::1/123
    Transport Protocol: TCP
    Local Port:
    Remote Port: 80, 443
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Cisco_WIN vpnagent.exe vpnagent.exe
    AUDI_VPN_Connection_UDP
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: UDP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_VPN_Gateways 143.164.6.70
    AUDI_VPN_Gateways 143.164.6.75
    AUDI_VPN_Gateways 143.164.36.4
    AUDI_VPN_Gateways 143.164.36.9
    AUDI_VPN_Gateways 143.164.99.0/24
    AUDI_VPN_Gateways 2001:678:35c::1/123
    Transport Protocol: UDP
    Local Port:
    Remote Port: 443, 500, 4500
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Cisco_WIN vpnagent.exe vpnagent.exe
    • Defined Zones

  • AUDI_Special_Networks ###not implemented in this Version###
    AUDI_Sport
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    DNS-Suffix: racetrack.local
    DNS-Suffix: sport.audi.local
    Connection Type:
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    AUDI_Sport_Boxnetwork 10.9.0.0/23
    AUDI_Sport_WinDarab 10.10.0.0/24
    STANDARD_Broadcast 255.255.255.255
    STANDARD_Link_Local 169.254.0.0/16
    STANDARD_Link_Local fe80::0/10
    STANDARD_Multicast ff02::1
    STANDARD_Multicast 224.0.0.0/4
    Network (Remote): Remote Network Name: Remote Network Range:
    Allow_AUDI_Sport_Boxnetwork
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Sport_Boxnetwork 10.9.0.0/23
    STANDARD_Link_Local 169.254.0.0/16
    STANDARD_Link_Local fe80::0/10
    STANDARD_Multicast ff02::1
    STANDARD_Multicast 224.0.0.0/4
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    Allow_Audi_Sport_WinDarab
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Sport_WinDarab 10.0.0.0/24
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    AUDI_China_VGC
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    DNS-Suffix: ap.vwg.
    Connection Type:
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    AUDI_China_VGC_CIDR 10.120.0.0/16
    Network (Remote): Remote Network Name: Remote Network Range:
    Allow_AUDI_China_VGC_Network
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network:
    Local Network Name:
    Local Network Range:
    Remote Network Name:
    AUDI_China_VGC_CIDR 10.120.0.0/16
    Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    AUDI_nonIP_Protocols
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    DNS-Suffix: cat.audi.local
    DNS-Suffix: audi.prod.vwg
    DNS-Suffix: prod.audi.local
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    NDIS
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type:
    Protocol: 0x1313
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    Profinet
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: 0x8892
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    EtherCAT
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: 0x88a4
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    CAv3
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: 0x4040
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    Homeplug_AV
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: 0x88e1
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    PrecisionTimeProtocol_PTP_over_Ethernet
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: 0x88f7
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    LinkLayerDiscoveryProtocol_LLDP
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: 0x88cc
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    AUDI_TV_Studio
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    DNS-Suffix: auditv.audi.local
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    AUDI_NOT_routable_192 192.168.0.0/16
    STANDARD_Broadcast 255.255.255.255
    Network (Remote): Remote Network Name: Remote Network Range:
    Allow_AUDI_TV_Network
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_NOT_routable_192 192.168.0.0/16
    Transport Protocol:
    Local Port:
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    AUDI_Special_Network_Production
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    DNS-Suffix: anllack.audi.de
    DNS-Suffix: gq.audi.local
    DNS-Suffix: prod.audi.local
    Connection Type:
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    AUDI_Production_Network 25.0.0.0/8
    AUDI_Production_Network 128.128.128.0/24
    AUDI_Production_Network 169.254.0.0/16
    AUDI_Production_Network 172.10.0.0/16
    AUDI_Production_Network 172.16.0.0/12
    AUDI_Production_Network 192.4.1.0/24
    AUDI_Production_Network 192.9.200.0/24
    AUDI_Production_Network 192.168.0.0/16
    STANDARD_Broadcast 255.255.255.255
    STANDARD_Multicast 224.0.0.0/4
    STANDARD_Multicast ff02::1
    STANDARD_UniqueLocalAdress fc00::0/7
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Production_Dtrack
    Allow_Dtrack_TCP
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 50105
    Remote Port:
    Application: Application Name: Filename: Signer:
    DTrack2 DTrack2 C:\Program Files (x86)\ART\DTrack2\DTrack2.exe
    Allow_Dtrack_UDP
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: UDP/IPv4, UDP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 5556, 50000-50001, 50105, 50110
    Remote Port: 5556, 50000-50001, 50105, 50110
    DTrack2 DTrack2 C:\Program Files (x86)\ART\DTrack2\DTrack2.exe Signer:
    Allow_Production_Network
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Corporate_Network 10.0.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2a01:4dc0::0/29
    AUDI_NOT_routable_CIDRs 172.16.0.0/12
    AUDI_NOT_routable_CIDRs 192.168.0.0/16
    AUDI_Production_Network 25.0.0.0/8
    AUDI_Production_Network 128.128.128.0/24
    AUDI_Production_Network 169.254.0.0/16
    AUDI_Production_Network 172.10.0.0/16
    AUDI_Production_Network 172.16.0.0/12
    AUDI_Production_Network 192.4.1.0/24
    AUDI_Production_Network 192.9.200.0/24
    AUDI_Production_Network 192.168.0.0/16
    STANDARD_Broadcast 255.255.255.255
    STANDARD_Multicast 224.0.0.0/4
    STANDARD_Multicast ff02::1
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    AUDI_CAT
    AUDI_CAT_DNS-Suffix
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    DNS-Suffix: cat.audi.local
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    AUDI_Measurement_CIDR 172.16.0.0/12
    AUDI_Measurement_CIDR 192.168.0.0/16
    AUDI_Measurement_CIDR_REVIEW 148.150.0.0/16
    AUDI_Measurement_CIDR_REVIEW 169.254.0.0/16
    AUDI_Measurement_CIDR_REVIEW 172.2.0.0/16
    AUDI_Measurement_CIDR_REVIEW 172.6.12.0/24
    AUDI_Measurement_CIDR_REVIEW 192.6.2.51
    AUDI_Measurement_CIDR_REVIEW 192.6.10.0/24
    AUDI_Measurement_CIDR_REVIEW fc00::0/7
    AUDI_Multicast_ff14 ff14::0/64
    STANDARD_Broadcast 255.255.255.255
    STANDARD_Link_Local 169.254.0.0/16
    STANDARD_Link_Local fe80::0/10
    STANDARD_Multicast 224.0.0.0/4
    STANDARD_Multicast ff02::1
    STANDARD_UniqueLocalAdress fc00::0/7
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Mesurement_Network
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Corporate_Network 10.0.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2a01:4dc0::0/29
    AUDI_Measurement_CIDR 172.16.0.0/12
    AUDI_Measurement_CIDR 192.168.0.0/16
    AUDI_Measurement_CIDR_REVIEW 148.150.0.0/16
    AUDI_Measurement_CIDR_REVIEW 169.254.0.0/16
    AUDI_Measurement_CIDR_REVIEW 172.2.0.0/16
    AUDI_Measurement_CIDR_REVIEW 172.6.12.0/24
    AUDI_Measurement_CIDR_REVIEW 192.6.2.51
    AUDI_Measurement_CIDR_REVIEW 192.6.10.0/24
    AUDI_Measurement_CIDR_REVIEW fc00::0/7
    AUDI_Measurement_Network 0.0.0.0/8
    STANDARD_Broadcast 255.255.255.255
    STANDARD_Link_Local 169.254.0.0/16
    STANDARD_Link_Local fe80::0/10
    STANDARD_Multicast 224.0.0.0/4
    STANDARD_Multicast ff02::1
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    AUDI_Mesurement_Network_DoIP
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    AUDI_Measurement_DoIP_CIDR_local fd53::0/16
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Measurement_DoIP_CIDR_Remote fd53::0/16
    AUDI_Measurement_DoIP_CIDR_Remote ff02::1
    AUDI_Measurement_DoIP_CIDR_Remote ff14::1/127
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    AUDI_CAT_RegKey
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    DNS-Suffix: cat.audi.local
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    AUDI_Measurement_CIDR 172.16.0.0/12
    AUDI_Measurement_CIDR 192.168.0.0/16
    AUDI_Measurement_CIDR_REVIEW 148.150.0.0/16
    AUDI_Measurement_CIDR_REVIEW 169.254.0.0/16
    AUDI_Measurement_CIDR_REVIEW 172.2.0.0/16
    AUDI_Measurement_CIDR_REVIEW 172.6.12.0/24
    AUDI_Measurement_CIDR_REVIEW 192.6.2.51
    AUDI_Measurement_CIDR_REVIEW 192.6.10.0/24
    AUDI_Measurement_CIDR_REVIEW fc00::0/7
    AUDI_Multicast_ff14 ff14::0/64
    STANDARD_Broadcast 255.255.255.255
    STANDARD_Link_Local 169.254.0.0/16
    STANDARD_Link_Local fe80::0/10
    STANDARD_Multicast 224.0.0.0/4
    STANDARD_Multicast ff02::1
    STANDARD_UniqueLocalAdress fc00::0/7
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Mesurement_Network
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Corporate_Network 10.0.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2a01:4dc0::0/29
    AUDI_Measurement_CIDR 172.16.0.0/12
    AUDI_Measurement_CIDR 192.168.0.0/16
    AUDI_Measurement_CIDR_REVIEW 148.150.0.0/16
    AUDI_Measurement_CIDR_REVIEW 169.254.0.0/16
    AUDI_Measurement_CIDR_REVIEW 172.2.0.0/16
    AUDI_Measurement_CIDR_REVIEW 172.6.12.0/24
    AUDI_Measurement_CIDR_REVIEW 192.6.2.51
    AUDI_Measurement_CIDR_REVIEW 192.6.10.0/24
    AUDI_Measurement_CIDR_REVIEW fc00::0/7
    AUDI_Measurement_Network 0.0.0.0/8
    STANDARD_Broadcast 255.255.255.255
    STANDARD_Link_Local 169.254.0.0/16
    STANDARD_Link_Local fe80::0/10
    STANDARD_Multicast 224.0.0.0/4
    STANDARD_Multicast ff02::1
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    AUDI_Mesurement_Network_DoIP
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    AUDI_Measurement_DoIP_CIDR_local fd53::0/16
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Measurement_DoIP_CIDR_Remote fd53::0/16
    AUDI_Measurement_DoIP_CIDR_Remote ff02::1
    AUDI_Measurement_DoIP_CIDR_Remote ff14::1/127
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    VAS Tester
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    RegKey: HKEY_LOCAL_MACHINE\Software\WOW6432Node\Volkswagen\VAS6154\Firewall\Enabled=1
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    192.168.0.0/16 192.168.0.0/16
    Multicast 224.0.0.0/4
    Network (Remote): Remote Network Name: Remote Network Range:
    VAS6154
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    DHCP Server: 192.168.1.69
    DHCP Server: 192.168.13.69
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    192.168.0.0/16 192.168.0.0/16
    Multicast 224.0.0.0/4
    Network (Remote): Remote Network Name: Remote Network Range:
    VAS6154
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Measurement_CIDR 172.16.0.0/12
    Measurement_CIDR 192.168.0.0/16
    STANDARD_Multicast 224.0.0.0/4
    STANDARD_Multicast ff02::1
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    VAS6356
    Action: Allow
    Direction: Either
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/IPv4, All Protocols/IPv6
    Network (Local): Local Network Name: Local Network Range:
    192.168.111.110 192.168.111.110
    Network (Remote): Remote Network Name: Remote Network Range:
    192.168.111.111 192.168.111.111
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
  • AUDI_Corporate_Network
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation: YES
    require ePO reachable: YES
    Location Criteria:
    Connection Type:
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    AUDI_Corporate_Network 10.0.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2a01:4dc0::0/29
    Audi_GVZ_Subnets
    Audi_GVZ_Subnets 143.164.3.144/28
    Audi_GVZ_Subnets 143.164.8.0/25
    Audi_GVZ_Subnets 143.164.8.128/27
    Audi_GVZ_Subnets 143.164.8.160/28
    Audi_GVZ_Subnets 143.164.8.176/28
    Audi_GVZ_Subnets 143.164.8.192/28
    Audi_GVZ_Subnets 143.164.8.208/29
    Audi_GVZ_Subnets 143.164.8.216/29
    Audi_GVZ_Subnets 143.164.8.224/28
    Audi_GVZ_Subnets 143.164.8.240/28
    Audi_GVZ_Subnets 143.164.9.0/26
    Audi_GVZ_Subnets 143.164.9.64/27
    Audi_GVZ_Subnets 143.164.9.96/27
    Audi_GVZ_Subnets 143.164.9.128/26
    Audi_GVZ_Subnets 143.164.9.192/27
    Audi_GVZ_Subnets 143.164.9.224/28
    Audi_GVZ_Subnets 143.164.9.240/28
    Audi_GVZ_Subnets 143.164.10.0/27
    Audi_GVZ_Subnets 143.164.10.32/27
    Audi_GVZ_Subnets 143.164.10.64/26
    Audi_GVZ_Subnets 143.164.10.128/26
    Audi_GVZ_Subnets 143.164.10.192/26
    Audi_GVZ_Subnets 143.164.11.0/25
    Audi_GVZ_Subnets 143.164.11.128/25
    Audi_GVZ_Subnets 143.164.12.0/25
    Audi_GVZ_Subnets 143.164.12.128/25
    Audi_GVZ_Subnets 143.164.13.0/25
    Audi_GVZ_Subnets 143.164.13.128/25
    Audi_GVZ_Subnets 143.164.14.0/23
    AUDI_NOT_routable_CIDRs 172.16.0.0/12
    STANDARD_Broadcast 255.255.255.255
    Standard_Link_Local 169.254.0.0/16
    Standard_Link_Local fe80::0/10
    STANDARD_Multicast 224.0.0.0/4
    Standard_Multicast ff02::1
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Allow_CorporateNetwork
    Action: Allow
    Direction: outbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Corporate_Network 10.0.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2a01:4dc0::0/29
    AUDI_Extranet_CIDRs 143.163.0.0/16
    AUDI_Extranet_CIDRs 143.164.0.0/16
    AUDI_NOT_routable_CIDRs 172.16.0.0/12
    AUDI_NOT_routable_CIDRs 192.168.0.0/16
    AUDI_Production_Network 25.0.0.0/8
    AUDI_Production_Network 128.128.128.0/24
    AUDI_Production_Network 169.254.0.0/16
    AUDI_Production_Network 172.10.0.0/16
    AUDI_Production_Network 172.16.0.0/12
    AUDI_Production_Network 192.4.1.0/24
    AUDI_Production_Network 192.9.200.0/24
    AUDI_Production_Network 192.168.0.0/16
    Porsche_Extranet_CIDRs 141.36.0.0/17
    STANDARD_Broadcast 255.255.255.255
    STANDARD_Link_Local 169.254.0.0/16
    STANDARD_Link_Local fe80::0/10
    STANDARD_Multicast 224.0.0.0/4
    STANDARD_Multicast ff02::1
    VW_Extranet_CIDRs 194.114.0.0/16
    VW_Extranet_CIDRs 193.23.0.0/16
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    AUDI_TeamsP2P
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: UDP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_10.0.0.0/8 10.0.0.0/8
    Transport Protocol:
    Local Port: 1024-65535
    Remote Port:
    Application: Application Name: Filename: Signer:
    Enterprise_APPs_Teams_WIN_SIGN MsTeams ms-teams.exe CN=microsoft corporation, O=microsoft corporation, L=redmond, ST=washington, C=us
    Enterprise_APPs_Teams_WIN_SIGN Teams teams.exe CN=microsoft corporation, O=microsoft corporation, L=redmond, ST=washington, C=us
    Allow_incoming_ICMP
    Allow inbound ICMPv4 Echo Request
    Action: Allow
    Direction: inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMP/IPv4
    Network:
    Local Network Name:
    Local Network Range:
    Remote Network Name:
    Remote Network Range:
    Transport Protocol:
    Local Port: 8
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    Allow inbound ICMPv6 Echo Request
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: ICMPv6/IPv6
    Network:
    Local Network Name:
    Local Network Range:
    Remote Network Name:
    Remote Network Range:
    Transport Protocol:
    Local Port: 128
    Remote Port:
    Application:
    Application Name:
    Filename:
    Signer:
    AUDI_Support_EHDD
    Allow_incoming_AutomateBOT
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Corporate_Network 10.0.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2a01:4dc0::0/29
    Transport Protocol:
    Local Port: 8181-8245
    Remote Port:
    Application: Application Name: Filename: Signer:
    Automate Automate.exe Automate.exe C=gb, L=warrington, O=blue prism ltd, OU=secure application development, CN=blue prism ltd
    Allow incoming SSCM Remote Control
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Corporate_Network 10.0.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2a01:4dc0::0/29
    Transport Protocol:
    Local Port: 2701
    Remote Port:
    Application: Application Name: Filename: Signer:
    SCCM Remote Control CmRcService CmRcService.exe CN=microsoft corporation, O=microsoft corporation, L=redmond, ST=washington, C=us
    Allow incoming Traffic from JumpServer
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_DE_Support_SD 10.250.153.76
    AUDI_DE_Support_WTS 10.250.152.70
    AUDI_DE_Support_WTS 10.250.152.71
    AUDI_DE_Support_WTS 10.250.152.72
    AUDI_DE_Support_WTS 10.250.152.73
    AUDI_HU_Support 10.215.133.28
    AUDI_HU_Support 10.215.133.155
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow incoming RDP
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Corporate_Network 10.0.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2a01:4dc0::0/29
    AUDI_Extranet_CIDRs 143.163.0.0/16
    AUDI_Extranet_CIDRs 143.164.0.0/16
    Transport Protocol:
    Local Port: 3389
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow_incoming_SpecialCases
    TMX
    Allow_incoming_TMX
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    TMX ApplicationServer 10.215.134.19
    TMX ApplicationServer 10.215.134.56
    TMX ApplicationServer 10.250.1.195
    TMX ApplicationServer 10.250.1.196
    TMX ApplicationServer 10.250.1.197
    TMX ApplicationServer 10.250.51.92
    TMX ApplicationServer 10.250.51.95
    TMX ApplicationServer 10.250.51.96
    TMX ApplicationServer 10.250.51.98
    TMX ApplicationServer 10.250.51.99
    TMX ApplicationServer 10.250.51.100
    TMX ApplicationServer 10.250.51.101
    TMX ApplicationServer 10.250.51.105
    TMX ApplicationServer 10.250.51.106
    Transport Protocol:
    Local Port: 135
    Remote Port:
    Application: Application Name: Filename: Signer:
    Allow_incoming_TMX
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    TMX ApplicationServer 10.215.134.19
    TMX ApplicationServer 10.215.134.56
    TMX ApplicationServer 10.250.1.195
    TMX ApplicationServer 10.250.1.196
    TMX ApplicationServer 10.250.1.197
    TMX ApplicationServer 10.250.51.92
    TMX ApplicationServer 10.250.51.95
    TMX ApplicationServer 10.250.51.96
    TMX ApplicationServer 10.250.51.98
    TMX ApplicationServer 10.250.51.99
    TMX ApplicationServer 10.250.51.100
    TMX ApplicationServer 10.250.51.101
    TMX ApplicationServer 10.250.51.105
    TMX ApplicationServer 10.250.51.106
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    tune.exe tune.exe tune.exe CN=siemens industry software inc., O=siemens industry software inc., L=plano, ST=texas, C=us
    Allow_incoming_FIS
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_FIS_DISPO_SONATA_Server 10.196.33.1
    AUDI_FIS_DISPO_SONATA_Server 10.196.33.110
    AUDI_FIS_DISPO_SONATA_Server 10.196.193.1
    AUDI_FIS_DISPO_SONATA_Server 10.196.193.110
    AUDI_FIS_DISPO_SONATA_Server 10.198.44.10
    AUDI_FIS_DISPO_SONATA_Server 10.198.44.130
    AUDI_FIS_DISPO_SONATA_Server 10.250.32.10
    AUDI_FIS_DISPO_SONATA_Server 10.250.32.130
    Transport Protocol:
    Local Port: 61234-61235
    Remote Port:
    Application: Application Name: Filename: Signer:
    allow_incoming_DOPX
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    audenemws000002.denem.audi.r02.vwgroup.com 10.196.0.132
    audinesa1119.ne.audi.vwg 10.196.0.130
    Transport Protocol:
    Local Port: 21443
    Remote Port:
    Application: Application Name: Filename: Signer:
    DopX DopX.ResourceGate.WebAPI DopX.ResourceGate.WebAPI.exe CN=icarus consulting gmbh, O=icarus consulting gmbh, ST=niedersachsen, C=de
    MDM
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    MDM Sever 10.196.37.209
    MDM Sever 10.250.0.182
    MDM Sever 10.250.34.199
    MDM Sever 10.250.50.55
    MDM Sever 10.250.50.91
    MDM Sever 10.250.50.97
    MDM Sever 10.250.50.106
    MDM Sever 10.250.50.142
    MDM Sever 10.250.50.164
    MDM Sever 10.250.50.168
    MDM Sever 10.250.50.176
    MDM Sever 10.250.50.179
    MDM Sever 10.250.50.186
    MDM Sever 10.250.100.48
    MDM Sever 10.250.100.53
    MDM Sever 10.250.100.70
    MDM Sever 10.250.100.102
    MDM Sever 10.250.100.107
    MDM Sever 10.250.100.126
    MDM Sever 10.250.100.133
    Transport Protocol:
    Local Port: 3389
    Remote Port:
    Application: Application Name: Filename: Signer:
    AUDI_MDM_APPs addisco.exe addisco.exe
    AUDI_MDM_APPs addisco_console.exe addisco_console.exe
    AUDI_MDM_APPs mdm_console.exe mdm_console.exe
    AUDI_MDM_APPs mdm_hkl.exe mdm_hkl.exe
    AUDI_MDM_APPs mdm_hkl_console.exe mdm_hkl_console.exe
    AUDI_MDM_APPs mdm_vislh.exe mdm_vislh.exe
    AUDI_MDM_APPs mdm_vislh_console.exe mdm_vislh_console.exe
    AUDI_MDM_APPs mdmabm.exe mdmabm.exe
    AUDI_MDM_APPs mdmabm_console.exe mdmabm_console.exe
    AUDI_MDM_APPs mdmcmp.exe mdmcmp.exe
    AUDI_MDM_APPs mdmcmp_console.exe mdmcmp_console.exe
    AUDI_MDM_APPs mdmdala.exe mdmdala.exe
    AUDI_MDM_APPs mdmdala_console.exe mdmdala_console.exe
    AUDI_MDM_APPs mdmfasis.exe mdmfasis.exe
    AUDI_MDM_APPs mdmfestigkeit.exe mdmfestigkeit.exe
    AUDI_MDM_APPs mdmfestigkeit_console.exe mdmfestigkeit_console.exe
    AUDI_MDM_APPs mdmflv.exe mdmflv.exe
    AUDI_MDM_APPs mdmflv_console.exe mdmflv_console.exe
    AUDI_MDM_APPs mdmfwe.exe mdmfwe.exe
    AUDI_MDM_APPs mdmfwe_console.exe mdmfwe_console.exe
    AUDI_MDM_APPs mdmqal.exe mdmqal.exe
    AUDI_MDM_APPs mdmqal_console.exe mdmqal_console.exe
    AUDI_MDM_APPs physikum.exe physikum.exe
    RCTNT
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    RCTNT Server 10.250.101.42
    Transport Protocol:
    Local Port: 1024
    Remote Port:
    Application: Application Name: Filename: Signer:
    RCTNT RCTNT.exe RCTNT.exe CN=ratio elektronik gmbh, O=ratio elektronik gmbh, STREET=im kammerbruehl 34, L=ravensburg, ST=baden-wuerttemberg, C=de, OID.1.3.6.1.4.1.311.60.2.1.1=ulm, OID.1.3.6.1.4.1.311.60.2.1.2=baden-wuerttemberg, OID.1.3.6.1.4.1.311.60.2.1.3=de, OID.2.5.4.5=hrb 550913, OID.2.5.4.15=private organization
    PSI_Penta_POS
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    PSI POS Server 10.250.50.203
    PSI POS Server 10.250.51.20
    Transport Protocol:
    Local Port: 19000-19010
    Remote Port:
    Application: Application Name: Filename: Signer:
    PSI_Penta Performlog.exe %ProgramFiles(x86)%\\Common Files\\PSIPENTA\\PerFORMer Monitor\\PerformLog.exe
    TorqueKeys
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port: 3456
    Remote Port:
    Application: Application Name: Filename: Signer:
    ToolServer ToolServer.exe ToolServer.exe
    VPG Plus VPGPLUS.exe VPGPLUS.exe
    TISC
    Action: Allow
    Direction: Inbound
    LocalAwareness:
    Conncection Isolation: yes
    require ePO reachable: yes
    Location Criteria:
    Connection Type: All types (Wired/Wireless/Virtual)
    Protocol: TCP/IPv4, TCP/IPv6
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    TISC_Server 10.248.146.204
    TISC_Server 10.250.50.45
    Transport Protocol:
    Local Port: 20001
    Remote Port:
    Application: Application Name: Filename: Signer:
    TISC TISC-Center.exe TISC-Center.exe CN=TLK-Thermo GmbH, O=TLK-Thermo GmbH, L=Braunschweig, ST=Niedersachsen, C=DE
    TISC TISC-ControlClient.exe TISC-ControlClient.exe CN=TLK-Thermo GmbH, O=TLK-Thermo GmbH, L=Braunschweig, ST=Niedersachsen, C=DE
    AUDI_Block_without_Event
    Audi_Block_EnterpriseAPPs
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Apple_WIN mDNSResponder.exe mDNSResponder.exe
    EnterpiseAPPs_Cordaware Infoclient.exe Infoclient.exe
    EnterpriseAPPs_Cisco_WIN vpnagent.exe vpnagent.exe
    EnterpriseAPPs_F5_WIN F5FltSrv.exe F5FltSrv.exe
    EnterpriseAPPs_F5_WIN F5InstallerService.exe F5InstallerService.exe
    EnterpriseAPPs_F5_WIN f5fsetup.exe f5fsetup.exe
    EnterpriseAPPs_HP_WIN AppHelperCap.exe AppHelperCap.exe
    EnterpriseAPPs_HP_WIN BridgeCommunication.exe BridgeCommunication.exe
    EnterpriseAPPs_HP_WIN DiagsCap.exe DiagsCap.exe
    EnterpriseAPPs_HP_WIN HPFirmwareInstaller.exe HPFirmwareInstaller.exe
    EnterpriseAPPs_HP_WIN HPLaserJetService.exe HPLaserJetService.exe
    EnterpriseAPPs_HP_WIN NetworkCap.exe NetworkCap.exe
    EnterpriseAPPs_HP_WIN SysInfoCap.exe SysInfoCap.exe
    EnterpriseAPPs_Intel_WIN OneApp.IGCC.WinService.exe OneApp.IGCC.WinService.exe
    EnterpriseAPPs_Intel_WIN crashlog_extractor.exe crashlog_extractor.exe
    EnterpriseAPPs_Intel_WIN esrv_svc.exe esrv_svc.exe
    EnterpriseAPPs_Logitech_WIN LogiSyncHandler.exe LogiSyncHandler.exe
    EnterpriseAPPs_Logitech_WIN LogiTuneUpdater.exe LogiTuneUpdater.exe
    EnterpriseAPPs_Logitech_WIN LogitechUpdate.exe LogitechUpdate.exe
    EnterpriseAPPs_Logitech_WIN ServiceLayer.exe ServiceLayer.exe
    EnterpriseAPPs_Nvidia_WIN NVDisplay.Container.exe NVDisplay.Container.exe
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSAService.exe ZSAService.exe
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATray.exe ZSATray.exe
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATrayManager.exe ZSATrayManager.exe
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATunnel.exe ZSATunnel.exe
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSAUpdater.exe ZSAUpdater.exe
    AUDI_Block_EnterpriseAPPs_Office
    Action: Block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Office_WIN AppData\Local\Microsoft\Teams\Update.exe AppData\Local\Microsoft\Teams\Update.exe
    EnterpriseAPPs_Office_WIN Excel.exe Excel.exe
    EnterpriseAPPs_Office_WIN FileCoAuth.exe FileCoAuth.exe
    EnterpriseAPPs_Office_WIN Integrator.exe Integrator.exe
    EnterpriseAPPs_Office_WIN MSPub.exe MSPub.exe
    EnterpriseAPPs_Office_WIN Microsoft.Flow.RPA.LogShipper.exe Microsoft.Flow.RPA.LogShipper.exe
    EnterpriseAPPs_Office_WIN Microsoft.Notes.exe Microsoft.Notes.exe
    EnterpriseAPPs_Office_WIN Microsoft.SharePoint.exe Microsoft.SharePoint.exe
    EnterpriseAPPs_Office_WIN OLicenseHeartbeat.exe OLicenseHeartbeat.exe
    EnterpriseAPPs_Office_WIN OfficeC2RClient.exe OfficeC2RClient.exe
    EnterpriseAPPs_Office_WIN OfficeClickToRun.exe OfficeClickToRun.exe
    EnterpriseAPPs_Office_WIN OneDrive.exe OneDrive.exe
    EnterpriseAPPs_Office_WIN OneDriveStandaloneUpdater.exe OneDriveStandaloneUpdater.exe
    EnterpriseAPPs_Office_WIN Onenote.exe Onenote.exe
    EnterpriseAPPs_Office_WIN Outlook.exe Outlook.exe
    EnterpriseAPPs_Office_WIN POWERPNT.exe POWERPNT.exe
    EnterpriseAPPs_Office_WIN SearchApp.exe SearchApp.exe
    EnterpriseAPPs_Office_WIN Teams.exe Teams.exe
    EnterpriseAPPs_Office_WIN Visio.exe Visio.exe
    EnterpriseAPPs_Office_WIN WINProj.exe WINProj.exe
    EnterpriseAPPs_Office_WIN Winword.exe Winword.exe
    EnterpriseAPPs_Office_WIN lync.exe lync.exe
    EnterpriseAPPs_Office_WIN lynchtmlconv.exe lynchtmlconv.exe
    EnterpriseAPPs_Office_WIN ms-teams.exe ms-teams.exe
    EnterpriseAPPs_Office_WIN ms-teamsupdate.exe ms-teamsupdate.exe
    EnterpriseAPPs_Office_WIN msoia.exe msoia.exe
    EnterpriseAPPs_Office_WIN officesvcmgr.exe officesvcmgr.exe
    AUDI_Block_EnterpriseAPPs_Edge
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Edge_WIN MicrosoftEdgeUpdate.exe MicrosoftEdgeUpdate.exe
    EnterpriseAPPs_Edge_WIN msedge.exe msedge.exe
    AUDI_Block_EnterpriseAPPs_Firefox
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Firefox_WIN firefox.exe firefox.exe
    AUDI_Block_EnterpriseAPPs_Chrome
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Chrome_WIN chrome.exe chrome.exe
    AUDI_Block_OS_Windows_APPs
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EXPLORER EXPLORER.exe EXPLORER.exe
    OS_Windows TPMProvisioningService.exe TPMProvisioningService.exe
    OS_Windows backgroundTaskHost.exe backgroundTaskHost.exe
    OS_Windows dasHost.exe dasHost.exe
    OS_Windows dllhost.exe dllhost.exe
    OS_Windows dxgiadaptercache.exe dxgiadaptercache.exe
    OS_Windows rundll32.exe rundll32.exe
    OS_Windows taskhostw.exe taskhostw.exe
    OS_Windows uhssvc.exe uhssvc.exe
    AUDI_Block_IP_LinkLocal
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Standard_Link_Local 169.254.0.0/16
    Standard_Link_Local fe80::0/10
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    AUDI_Block_IP_Zscaler
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Zscaler_DataCenter_MUC 147.161.177.193
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Block_outgoing_Traffic_CorporateLAN
    Action: Block
    Direction: Outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type:
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Block_incoming_Traffic_CorporateLAN
    Action: block
    Direction: inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type:
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
  • AUDI_Corporate_Network_F5
    GroupSettings: :
    LocalAwareness: ENABLED
    Conncection Isolation: ENABLED
    require ePO reachable:
    Location Criteria: DNS Server = 143.164.6.120
    Location Criteria: DNS Server = 143.164.6.121
    Network (Local): Local Network Name: Local Network Range:
    AUDI_NOT_routable_192 192.168.0.0/16
    STANDARD_Broadcast 255.255.255.255
    Standard_Link_Local 169.254.0.0/16
    Standard_Link_Local fe80::0/10
    Standard_Multicast 224.0.0.0/4
    Standard_Multicast ff02::1
    AUDI_Allow_CorporateNetwork
    Action: Allow
    Direction: Outbound
    LocalAwareness: ENABLED
    Conncection Isolation: ENABLED
    require ePO reachable:
    Location Criteria: DNS Server = 143.164.6.120
    Location Criteria: DNS Server = 143.164.6.121
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Corporate_Network 10.0.0.0/8
    AUDI_Corporate_Network 11.0.0.0/8
    AUDI_Corporate_Network 2a01:4dc0::0/29
    AUDI_Extranet_CIDRs 143.163.0.0/16
    AUDI_Extranet_CIDRs 143.164.0.0/16
    AUDI_NOT_routable_CIDRs 172.16.0.0/12
    AUDI_NOT_routable_CIDRs 192.168.0.0/16
    AUDI_Production_Network 25.0.0.0/8
    AUDI_Production_Network 128.128.128.0/24
    AUDI_Production_Network 169.254.0.0/16
    AUDI_Production_Network 172.10.0.0/16
    AUDI_Production_Network 172.16.0.0/12
    AUDI_Production_Network 192.4.1.0/24
    AUDI_Production_Network 192.168.0.0/16
    AUDI_Production_Network 192.9.200.0/24
    Porsche_Extranet_CIDRs 141.36.0.0/17
    STANDARD_Broadcast 255.255.255.255
    Standard_Link_Local 169.254.0.0/16
    Standard_Link_Local fe80::0/10
    STANDARD_Multicast 224.0.0.0/4
    STANDARD_Multicast ff02::1
    VW_Extranet_CIDRs 193.23.0.0/16
    VW_Extranet_CIDRs 194.114.0.0/16
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Block_outgoing_Traffic_CorporateLAN
    Action: Block
    Direction: Outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type:
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    Block_incoming_Traffic_CorporateLAN
    Action: Block
    Direction: inbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type:
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    • Roadwarrior

  • AUDI_LandingpageMode
    AUDI_LandingpageMode
    Action: Allow
    Direction: Out
    LocalAwareness: ENABLED
    Conncection Isolation:
    require ePO reachable:
    Location Criteria: Sheduled Type (3min)
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: TCP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSAService.exe ZSAService.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATray.exe ZSATray.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATrayManager.exe ZSATrayManager.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATunnel.exe ZSATunnel.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSAUpdater.exe ZSAUpdater.exe CN="zscaler, inc.", O="zscaler, inc.", L=san jose, ST=california, C=us
    Enterprise_APPs_Edge_Path_WIN MicrosoftEdgeCP.exe %systemroot%\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
    Enterprise_APPs_Edge_Path_WIN msedge.exe %programfiles(x86)%\Microsoft\Edge\Application\msedge.exe
    Enterprise_APPs_Firefox_Path_WIN firefox.exe %programfiles(x86)%\Mozilla Firefox\firefox.exe
  • AUDI_Roadwarrior
    : GroupSettings: :
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type:
    Protocol:
    Network (Local): Local Network Name: Local Network Range:
    STANDARD_Private_CIDRs 10.0.0.0/8
    STANDARD_Private_CIDRs 172.16.0.0/12
    STANDARD_Private_CIDRs 192.168.0.0/16
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Roadwarrior_outgoing
    Action: Allow
    Direction: Outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: TCP/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    AUDI_Extranet_CIDRs 143.164.0.0/16
    AUDI_Extranet_CIDRs 143.163.0.0/16
    STANDARD_Private_CIDRs 10.0.0.0/8
    STANDARD_Private_CIDRs 172.16.0.0/12
    STANDARD_Private_CIDRs 192.168.0.0/16
    VW_Extranet_CIDRs 193.23.0.0/16
    VW_Extranet_CIDRs 194.114.0.0/16
    Transport Protocol: TCP
    Local Port:
    Remote Port: 80, 443
    Application: Application Name: Filename: Signer:
  • AUDI_Block_without_Event
    Audi_Block_EnterpriseAPPs
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Apple_WIN mDNSResponder.exe mDNSResponder.exe
    EnterpiseAPPs_Cordaware Infoclient.exe Infoclient.exe
    EnterpriseAPPs_Cisco_WIN vpnagent.exe vpnagent.exe
    EnterpriseAPPs_F5_WIN F5FltSrv.exe F5FltSrv.exe
    EnterpriseAPPs_F5_WIN F5InstallerService.exe F5InstallerService.exe
    EnterpriseAPPs_F5_WIN f5fsetup.exe f5fsetup.exe
    EnterpriseAPPs_HP_WIN AppHelperCap.exe AppHelperCap.exe
    EnterpriseAPPs_HP_WIN BridgeCommunication.exe BridgeCommunication.exe
    EnterpriseAPPs_HP_WIN DiagsCap.exe DiagsCap.exe
    EnterpriseAPPs_HP_WIN HPFirmwareInstaller.exe HPFirmwareInstaller.exe
    EnterpriseAPPs_HP_WIN HPLaserJetService.exe HPLaserJetService.exe
    EnterpriseAPPs_HP_WIN NetworkCap.exe NetworkCap.exe
    EnterpriseAPPs_HP_WIN SysInfoCap.exe SysInfoCap.exe
    EnterpriseAPPs_Intel_WIN OneApp.IGCC.WinService.exe OneApp.IGCC.WinService.exe
    EnterpriseAPPs_Intel_WIN crashlog_extractor.exe crashlog_extractor.exe
    EnterpriseAPPs_Intel_WIN esrv_svc.exe esrv_svc.exe
    EnterpriseAPPs_Logitech_WIN LogiSyncHandler.exe LogiSyncHandler.exe
    EnterpriseAPPs_Logitech_WIN LogiTuneUpdater.exe LogiTuneUpdater.exe
    EnterpriseAPPs_Logitech_WIN LogitechUpdate.exe LogitechUpdate.exe
    EnterpriseAPPs_Logitech_WIN ServiceLayer.exe ServiceLayer.exe
    EnterpriseAPPs_Nvidia_WIN NVDisplay.Container.exe NVDisplay.Container.exe
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSAService.exe ZSAService.exe
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATray.exe ZSATray.exe
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATrayManager.exe ZSATrayManager.exe
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSATunnel.exe ZSATunnel.exe
    EnterpriseAPPs_Zscaler_WIN_SIGN ZSAUpdater.exe ZSAUpdater.exe
    AUDI_Block_EnterpriseAPPs_Office
    Action: Block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Office_WIN AppData\Local\Microsoft\Teams\Update.exe AppData\Local\Microsoft\Teams\Update.exe
    EnterpriseAPPs_Office_WIN Excel.exe Excel.exe
    EnterpriseAPPs_Office_WIN FileCoAuth.exe FileCoAuth.exe
    EnterpriseAPPs_Office_WIN Integrator.exe Integrator.exe
    EnterpriseAPPs_Office_WIN MSPub.exe MSPub.exe
    EnterpriseAPPs_Office_WIN Microsoft.Flow.RPA.LogShipper.exe Microsoft.Flow.RPA.LogShipper.exe
    EnterpriseAPPs_Office_WIN Microsoft.Notes.exe Microsoft.Notes.exe
    EnterpriseAPPs_Office_WIN Microsoft.SharePoint.exe Microsoft.SharePoint.exe
    EnterpriseAPPs_Office_WIN OLicenseHeartbeat.exe OLicenseHeartbeat.exe
    EnterpriseAPPs_Office_WIN OfficeC2RClient.exe OfficeC2RClient.exe
    EnterpriseAPPs_Office_WIN OfficeClickToRun.exe OfficeClickToRun.exe
    EnterpriseAPPs_Office_WIN OneDrive.exe OneDrive.exe
    EnterpriseAPPs_Office_WIN OneDriveStandaloneUpdater.exe OneDriveStandaloneUpdater.exe
    EnterpriseAPPs_Office_WIN Onenote.exe Onenote.exe
    EnterpriseAPPs_Office_WIN Outlook.exe Outlook.exe
    EnterpriseAPPs_Office_WIN POWERPNT.exe POWERPNT.exe
    EnterpriseAPPs_Office_WIN SearchApp.exe SearchApp.exe
    EnterpriseAPPs_Office_WIN Teams.exe Teams.exe
    EnterpriseAPPs_Office_WIN Visio.exe Visio.exe
    EnterpriseAPPs_Office_WIN WINProj.exe WINProj.exe
    EnterpriseAPPs_Office_WIN Winword.exe Winword.exe
    EnterpriseAPPs_Office_WIN lync.exe lync.exe
    EnterpriseAPPs_Office_WIN lynchtmlconv.exe lynchtmlconv.exe
    EnterpriseAPPs_Office_WIN ms-teams.exe ms-teams.exe
    EnterpriseAPPs_Office_WIN ms-teamsupdate.exe ms-teamsupdate.exe
    EnterpriseAPPs_Office_WIN msoia.exe msoia.exe
    EnterpriseAPPs_Office_WIN officesvcmgr.exe officesvcmgr.exe
    AUDI_Block_EnterpriseAPPs_Edge
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Edge_WIN MicrosoftEdgeUpdate.exe MicrosoftEdgeUpdate.exe
    EnterpriseAPPs_Edge_WIN msedge.exe msedge.exe
    AUDI_Block_EnterpriseAPPs_Firefox
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Firefox_WIN firefox.exe firefox.exe
    AUDI_Block_EnterpriseAPPs_Chrome
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EnterpriseAPPs_Chrome_WIN chrome.exe chrome.exe
    AUDI_Block_OS_Windows_APPs
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    EXPLORER EXPLORER.exe EXPLORER.exe
    OS_Windows TPMProvisioningService.exe TPMProvisioningService.exe
    OS_Windows backgroundTaskHost.exe backgroundTaskHost.exe
    OS_Windows dasHost.exe dasHost.exe
    OS_Windows dllhost.exe dllhost.exe
    OS_Windows dxgiadaptercache.exe dxgiadaptercache.exe
    OS_Windows rundll32.exe rundll32.exe
    OS_Windows taskhostw.exe taskhostw.exe
    OS_Windows uhssvc.exe uhssvc.exe
    AUDI_Block_IP_LinkLocal
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Standard_Link_Local 169.254.0.0/16
    Standard_Link_Local fe80::0/10
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
    AUDI_Block_IP_Zscaler
    Action: block
    Direction: outbound
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Zscaler_DataCenter_MUC 147.161.177.193
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer:
  • Block_all_outgoing_Roadwarrior
    Action: Block
    Direction: Out
    LocalAwareness:
    Conncection Isolation:
    require ePO reachable:
    Location Criteria:
    Connection Type: All types (Wired,Wireless,Virtual)
    Protocol: All Protocols/Any
    Network (Local): Local Network Name: Local Network Range:
    Network (Remote): Remote Network Name: Remote Network Range:
    Transport Protocol:
    Local Port:
    Remote Port:
    Application: Application Name: Filename: Signer: